7 ms·
The GDPR states you can only offer opt in and NOT opt out. This is not an opt in method, no matter how Facebook spins it. I hope the EU pulls them on this :) G
by kennydude 9y ago
The GDPR states you can only offer opt in and NOT opt out. This is not an opt in method, no matter how Facebook spins it. I hope the EU pulls them on this :)
Going by http://techblog.bozho.net/gdpr-practical-guide-developers/ http://techblog.bozho.net/gdpr-practical-guide-developers/ anyway
- Navarr 9y agoI'm confused, didn't you opt in when you clicked the checkbox to agree to Facebook's T&C?
- smueller1234 9y agoA big thing in GDPR is that consent must be sufficiently specific and explicit. Long and generic T&C might no longer pass. Ultimately, I imagine the regulation will make a lot of lawyers richer as this kind of stuff gets hammered out in practice.
- brylie 9y agoWith GDPR, blanket "opt-ins", I.e. clickwrap, won't suffice. People need to give informed consent, meaning key uses of personal data must be explained in plain language. Hopefully this will lead to a lot less abuse of I Agree to Everything and any Future Changes type of TOS.
- downandout 9y agoYes, you did. This is just another clickbait headline. GDPR - when it becomes active - will outlaw the opt-out strategy. But there is nothing legally wrong with it today.
- PeterisP 8y agoNo, the existing privacy legislation already requires opt-in for processing of biometric data; GDPR makes many things stricter, but much of it is already a legal requirement.
- downandout 8y agoApparently Facebook's well-trained legal team disagrees with your assessment of European law. Facebook isn't stupid; they wouldn't have done this if it weren't legal.
- pimmen 9y agoYou have to give consent to every use of your personal data. You can't agree to them using your data for 47 different purposes at the same time.
- fibers 9y agoyou can always opt out by moving out of europe /s
- 734786710934 9y agoGDPR doesn't go into effect until May 25. The article states that this is a test that will become opt-in at that time.
- gboudrias 9y agoJesus christ how evil can Facebook get? "We'll just sneak in this test to identify everyone before we have to make them opt into it." What's even the point of opting out after that? That's some evil genius machinations.
- dhimes 8y agoBrings up a question about the GDPR: do you have to delete any data on someone, or just data they entered? If they get the facial recognition working so they can recognize people in instagram photos and whatnot, then they'll be able to have data on you even if you're not a user. It's part of why I never liked people "tagging" me in photos.
- eksemplar 8y agoThere is another big problem with the GDPR for international companies. I mean, how do we know you comply? I work in the public sector in Denmark mind you, we have quarterly audits and despite having had a law that was pretty much GDPR levelalready, we’ve passed all audits. I don’t think we should have, I won’t go into details on this, but how do you audit 300+ systems, some of which the central IT department doesn’t even know exist because some rogue manager bought them? I have no idea, and I have even less of an idea on how you’d audit the cloud.
- rhizome 8y agodo you have to delete any data on someone, or just data they entered? A discussion of derivative data and models was sadly and sorely missing from Zuck's recent Congressional testimony.
- e12e 8y agoYou're responsible for the data you store and have access to that can be linked to an individual. The GDPR is quite clear on this.
- Analemma_ 9y agoYeah, let's see one of those "4% of global revenue" fines they were talking about. Would be about $1.6 billion based on Facebook's 2017 financials.
- fredley 9y agoProtip: wait until 25th May to delete your Facebook account (if you're in the EU).
- wereHamster 9y agoWhy? Does the GDPR mandate that Facebook treat the deletion request differently?
- SahAssar 9y agoYes, currently there is nothing forcing them to delete all the data, after GDPR takes effect if you send them a deletion request under the GDPR they are forced to do so within a month (or 90 days if there are special circumstances).
- andy_ppp 9y agoDoes GDPR consider data in training sets and trained deep learning models as your data? It's kind of a small snapshot of your expected responses to some stimulus right, it's arguably more your data than anything...
- SahAssar 9y agoIf it's personally identifiable, yes. You also need opt-in (not opt-out or buried deep in a TOS) permission to use personal data in that way before feeding it to your learning model (since that use-case is basically never the primary purpose that the data was given for). If you use any sort of automated system to make decisions about a EU customer that impacts their life in a significant way (like whether to ban them or not) you will also need to have some sort of appeals system where they can appeal to have the decision looked at by a human and potentially have it reversed.
- annabellish 9y ago>You also need opt-in (not opt-out or buried deep in a TOS) permission to use personal data in that way before feeding it to your learning model (since that use-case is basically never the primary purpose that the data was given for). Huh, now _that's_ interesting. Do you have a source for that? I know some guys at work that'll be upset if I can prove that to them, given that their pet project is a MI personalisation system making heavy use of just watching everything everyone does in an identifiable manner. (I'll be honest, part of the draw is being able to say 'I told you so'~)
- a_imho 9y agoWhat if they claim people opted in? How can anyone prove or disprove that without a signed piece of paper really?
- reaperducer 8y agoMakes sense. Think of all of the spam e-mail messages you get with tiny text at the bottom reading something like "You are receiving this e-mail because you signed up for {$web_site_you_never_heard_of_before}."
- r00fus 8y agoThis will be forced with a challenge. With clickwrap super-generic consent being disallowed under GDPR, it's only going to take a single challenge where FB doesn't have the explicit consent for gov to start levying fines.
- a_imho 8y agoAnyone can pull up a piece of data to claim they have consent, you need something like a signature otherwise it is words against each other. There is no way to verify consent with some click through, anyone can click a link in someone else's name or create a record in a db that says so.